Fabrica Engine 2.1 Cross Site Scripting / Denial Of Service / SQL Injection

Hello Bugtraq! I want to warn you about Cross-Site Scripting, Denial of Service and SQL Injection vulnerabilities in Fabrica Engine which I found in 2008 and 2009 at web site of one online shop. It's commercial engine for online shops. SecurityVulns ID: 11274. ------------------------- Affected...

Уязвимости в Fabrica Engine

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, Denial of Service и SQL Injection уязвимостях в Fabrica Engine. Это коммерческий движок для онлайн-магазинов. XSS WASC-08: http://site/search/?keyword=223E3Cscript3Ealertdocument.cookie3C/script3E...